From e9e878c6993dc29e9e002dae21b898baa10cb974 Mon Sep 17 00:00:00 2001
From: Jimisola Laursen <jimisola@jimisola.com>
Date: Mon, 17 Aug 2026 23:43:12 +0200
Subject: [PATCH] build(npm): pin the three remaining caret ranges

Every dependency in the reqstool repos is pinned to an exact version except
these three, which carried `^` ranges. A caret range means the version that gets
installed depends on when you install -- CI, a laptop and a release build can
each resolve differently, and a bad upstream release lands without a PR to
review it.

Pinned to what the lockfile already resolved, so nothing changes behaviourally:
esbuild 0.28.2, eslint-config-prettier 10.1.8, prettier 3.9.6 -- all of which
are also the current latest. Verified `npm ci`, `npm run lint` and the prettier
check all still pass.

Renovate keeps proposing upgrades as before; they now arrive as reviewable PRs
rather than silently.

Signed-off-by: Jimisola Laursen <jimisola@jimisola.com>
---
 package-lock.json | 6 +++---
 package.json      | 8 ++++----
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index a7ebb66..76be400 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -19,11 +19,11 @@
         "@vscode/test-cli": "0.0.15",
         "@vscode/test-electron": "3.1.0",
         "@vscode/vsce": "3.9.2",
-        "esbuild": "^0.28.0",
+        "esbuild": "0.28.2",
         "eslint": "10.8.1",
-        "eslint-config-prettier": "^10.1.8",
+        "eslint-config-prettier": "10.1.8",
         "mocha-junit-reporter": "2.2.1",
-        "prettier": "^3.8.3",
+        "prettier": "3.9.6",
         "rimraf": "6.1.3",
         "typescript": "6.0.3",
         "vscode-extension-tester": "8.24.0"
diff --git a/package.json b/package.json
index aca2937..40a3046 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "reqstool",
   "displayName": "reqstool Support",
-  "description": "Requirements traceability for source code via reqstool LSP — hover, completion, diagnostics, go-to-definition",
+  "description": "Requirements traceability for source code via reqstool LSP \u2014 hover, completion, diagnostics, go-to-definition",
   "version": "0.0.0-dev",
   "reqstoolVersion": "0.11.0",
   "publisher": "reqstool",
@@ -223,11 +223,11 @@
     "@vscode/test-cli": "0.0.15",
     "@vscode/test-electron": "3.1.0",
     "@vscode/vsce": "3.9.2",
-    "esbuild": "^0.28.0",
+    "esbuild": "0.28.2",
     "eslint": "10.8.1",
-    "eslint-config-prettier": "^10.1.8",
+    "eslint-config-prettier": "10.1.8",
     "mocha-junit-reporter": "2.2.1",
-    "prettier": "^3.8.3",
+    "prettier": "3.9.6",
     "rimraf": "6.1.3",
     "typescript": "6.0.3",
     "vscode-extension-tester": "8.24.0"